package org.sunxin.guestbook.controller;

import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;

import org.sunxin.guestbook.*;
import org.sunxin.guestbook.beans.*;

public class AdminLogonProcessor implements Processor
{

    public void perform(HttpServletRequest req,
                        HttpServletResponse resp,
                        ServletContext sc)
        throws IOException, ServletException,UserException
    {
        //在請求對象中保存manager屬性，XsltServlet將根據這個屬性的值來判斷
        //是否將樣式表頂層參數user的值設置為“manager”。
        req.setAttribute("manager","manager");

        String action = req.getParameter("action");
        //判斷用戶是訪問管理員登錄頁面還是提交登錄信息。
        if (null == action || !"logon".equals(action))
        {
            try
            {
                StringBuffer sb = new StringBuffer(64);
                sb.append("<?xml version=\"1.0\" encoding=\"GB2312\"?>");
                sb.append("<page name=\"logon\">");
                sb.append("<logon/></page>");
                req.setAttribute("page", sb.toString());
            }
            catch (Exception e)
            {
                throw new ServletException("頁面產生錯誤!");
            }
        }
        else
        {
            String username = req.getParameter("username");
            String password = req.getParameter("password");

            if (null == username || null == password ||
                "".equals(username) || "".equals(password))
            {
                throw new UserException(
                    "用戶名或密碼不能為空，請<a href=\"admin_logon.jsp\">返回</a>重新輸入!");
            }

            User user = new User();
            user.setUsername(username);
            user.setPassword(password);

            GuestbookDB gstDB = (GuestbookDB) sc.getAttribute("gstdb");

            boolean b = gstDB.validateManager(user);

            if (false==b)
            {
                throw new UserException(
                    "用戶名或密碼錯誤，請<a href=\"admin_logon.jsp\">返回</a>重新輸入!");
            }
            else
            {
                HttpSession session = req.getSession();
                session.setAttribute("manager", username);
                String strMsg ="登錄成功，<a href=\"admin_index.jsp\">查看留言</a>";
                req.setAttribute("success", strMsg);
                new SuccessProcessor().perform(req, resp, sc);
            }
        }
    }
}